HP OpenView Operations Administrator's Reference - filibeto.org

About OVO Security
About Network Security
482
About Network Security
In OVO, network security is designed to improve the security of
connections between processes. These secure process connections can be
within a network, across multiple networks, or through routers or other
restrictive devices.
For example, you could limit access to a network or a section of a network
by restricting the set of nodes (with or without OVO agents running on
them) that are allowed to communicate with the management server
across restrictive routers or even a packet-filtering firewall. It is not
important to OVO whether the server or the network of managed nodes
are inside or outside the firewall. A management server outside your
firewall can manage a network of nodes inside your firewall. Conversely,
a management server inside your firewall can manage nodes outside
your firewall.
One way of limiting access to a network, and consequently improving the
network’s inherent security, is to restrict all connections between OVO
processes on the management server and a managed node to a specific
range of ports. To simplify matters, OVO sets the default value on the
managed node to “No security,” and allows you to select the security
configuration node by node. In this way, you can change the security of a
given node, depending, for example, on whether there is a need for the
node to communicate across a firewall or through a restricted router.
Chapter 12